force default sessions to set the vary header for cookies